$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2cbbf53c-f73d-3777-9460-5deb463a2b52.roa File: 2cbbf53c-f73d-3777-9460-5deb463a2b52.roa (raw, json) Hash identifier: q9kuOMBbyB3aea2fCzJdBsxjlfjy1b7YVvLJWQZQlr0= Subject key identifier: 07:88:6B:69:26:9A:D8:C9:70:2F:87:68:AC:24:DD:7D:75:09:A0:AA Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F432858494B64008E4BFE63F6084D7780 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2cbbf53c-f73d-3777-9460-5deb463a2b52.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 13576 IP address blocks: 64.33.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:00:8e:4b:fe:63:f6:08:4d:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=bc759084-7005-4fd7-b9a2-898418b58e10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:34:10:fb:22:cf:3b:be:78:90:e6:37:8d:4b: fd:b5:32:62:12:15:95:a1:ae:80:b3:1b:ce:df:ec: c8:37:7e:91:e2:26:be:ab:3f:41:7a:6c:43:65:50: 1e:1b:75:ad:dd:2c:7b:37:17:69:29:67:51:62:2c: b6:25:8a:d2:40:74:b9:de:46:6f:29:cd:fd:32:9d: e3:40:dc:eb:33:04:50:6c:47:62:2f:55:fe:6e:52: 6a:32:20:49:80:37:25:47:64:61:04:04:2d:8f:5d: e8:d4:ec:31:c3:a7:2a:66:9d:0b:3f:55:f6:75:c1: f5:ee:08:5b:31:6c:05:37:2f:de:95:0d:01:b2:a7: 7d:7a:1d:d6:f7:32:24:0c:8f:05:a5:88:6b:8c:bb: 43:42:89:c5:d6:ba:b6:90:52:df:5d:49:2a:9a:cb: 12:9d:68:00:4b:b1:7e:be:16:46:b0:57:41:ee:06: 2c:32:5f:84:07:3a:1a:25:89:c7:fa:15:69:83:dc: 79:4c:9a:62:cc:9e:4a:1c:8f:78:52:72:42:e5:75: 0d:e0:75:dd:ff:97:87:51:df:c3:70:2d:0f:75:b4: da:a9:2f:bd:d8:05:03:33:6e:0e:5c:da:e4:96:43: 00:31:ff:53:ec:23:79:44:1b:60:93:d0:b2:b7:3e: d8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:88:6B:69:26:9A:D8:C9:70:2F:87:68:AC:24:DD:7D:75:09:A0:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2cbbf53c-f73d-3777-9460-5deb463a2b52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 64.33.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:06:89:6b:b1:f7:5a:ca:17:b1:41:8d:02:29:ba:5d:1a:0b: fd:1f:77:c5:5c:e7:ef:29:9e:e0:39:b2:c2:30:2b:22:a8:2c: 64:88:79:47:b2:39:c5:74:3e:84:4e:e9:42:fd:09:77:aa:d8: e3:df:05:a8:9b:b4:74:62:52:5e:88:33:d8:c1:9b:f6:e9:41: 5d:53:7d:74:f6:b9:f1:95:d8:ba:09:20:69:d0:a0:24:c8:e6: 22:c6:95:1a:88:70:b0:dc:ce:62:39:7c:04:d5:28:5c:d9:ed: fe:0e:ad:20:0f:f2:27:d2:ef:d0:76:97:b8:cd:90:49:81:64: dc:d1:f1:43:60:07:d6:28:16:04:03:66:e2:26:63:aa:ba:d2: 0e:71:52:f4:42:a4:36:56:da:4d:e3:10:ff:91:4c:fe:d5:5d: 30:3c:ef:ab:96:78:55:83:b8:7d:67:97:a5:f4:e4:65:6a:d9: 4c:56:d4:62:bf:6b:c4:24:91:d6:39:2e:f5:45:2e:79:2d:8f: 58:f2:87:6b:f3:fd:34:09:5c:92:47:4a:8a:a4:01:91:5d:b3: 01:50:4a:3f:bd:f0:8d:b5:a9:9d:86:64:6c:49:78:44:e9:fa: 8b:02:f5:07:0f:00:41:a5:02:ba:a8:89:a4:91:19:c9:2e:67: 04:b7:f6:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZACOS/5j9ghNd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk YmM3NTkwODQtNzAwNS00ZmQ3LWI5YTItODk4NDE4YjU4ZTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjQQ+yLPO754kOY3jUv9tTJiEhWVoa6AsxvO 3+zIN36R4ia+qz9BemxDZVAeG3Wt3Sx7NxdpKWdRYiy2JYrSQHS53kZvKc39Mp3j QNzrMwRQbEdiL1X+blJqMiBJgDclR2RhBAQtj13o1Owxw6cqZp0LP1X2dcH17ghb MWwFNy/elQ0Bsqd9eh3W9zIkDI8FpYhrjLtDQonF1rq2kFLfXUkqmssSnWgAS7F+ vhZGsFdB7gYsMl+EBzoaJYnH+hVpg9x5TJpizJ5KHI94UnJC5XUN4HXd/5eHUd/D cC0PdbTaqS+92AUDM24OXNrklkMAMf9T7CN5RBtgk9Cytz7Y9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAeIa2kmmtjJcC+HaKwk3X11CaCqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMmNiYmY1M2MtZjczZC0z Nzc3LTk0NjAtNWRlYjQ2M2EyYjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCH9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMGiWux91rKF7FBjQIpul0aC/0fd8Vc5+8pnuA5ssIwKyKoLGSIeUey OcV0PoRO6UL9CXeq2OPfBaibtHRiUl6IM9jBm/bpQV1TfXT2ufGV2LoJIGnQoCTI 5iLGlRqIcLDczmI5fATVKFzZ7f4OrSAP8ifS79B2l7jNkEmBZNzR8UNgB9YoFgQD ZuImY6q60g5xUvRCpDZW2k3jEP+RTP7VXTA876uWeFWDuH1nl6X05GVq2UxW1GK/ a8QkkdY5LvVFLnktj1jyh2vz/TQJXJJHSoqkAZFdswFQSj+98I21qZ2GZGxJeETp +osC9QcPAEGlArqoiaSRGckuZwS39j4= -----END CERTIFICATE-----Generated at Thu Apr 17 08:32:52 2025 by rpki-client